On-Site KL Penetration Tester — AI-Driven & Hands-On

MODE FAIR SDN BHD; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

On-site work at Sunway Tower

Job summary

ModeFair SDN BHD in Kuala Lumpur is seeking a hands-on Cybersecurity Engineer (Penetration Testing) to perform end-to-end testing across web apps, APIs, cloud, network and endpoints. You will leverage AI agents to speed recon, evidence gathering and retests, while owning method, scope and quality.

You will report to the CTO as the first in this role, building testing processes and delivering actionable findings with remediation guidance. On-site only at Sunway Tower, Kuala Lumpur.

Qualifications

• At least 2 years of hands-on penetration testing, red team or security validation.
• Practical testing across web apps and at least some API, cloud, network, identity and endpoints
• Uses AI tools daily in work
• Writes clear findings with severity, impact and fix guidance
• Working knowledge of OWASP, CVEs and MITRE ATT&CK
• Experience testing cloud-hosted systems (AWS and Huawei Cloud) and Linux/Windows

Responsibilities

• Penetration testing & validation
• Plan and run hands-on tests on web apps, APIs, cloud, network, identity and endpoints within scope
• Find exploitable issues and prove impact with evidence
• Write practical findings and fixes owners can act on
• Retest fixes and track closure with CTO and system owners
• Support purple-team and security validation with SOC when needed
• Help improve secure build practices from testing insights
• Use Claude Code and scripts to speed recon, checks, evidence and reporting
• Prefer build-or-script over buying a scanner when not cost-effective
• Keep tests repeatable across releases

Skills

Penetration testing

Red team

AI tools

Scripting

OWASP

Cloud security

Linux

Windows

Education

CEH

CPTE

MITRE ATT&CK certification

CCPT

CCRTS

OSCP

RCCE

CompTIA Security+

GSEC

Tools

Claude Code

Python

Bash

PowerShell

Job description

ModeFair SDN BHD in Kuala Lumpur is seeking a hands-on Cybersecurity Engineer (Penetration Testing) to perform end-to-end testing across web apps, APIs, cloud, network and endpoints. You will leverage AI agents to speed recon, evidence gathering and retests, while owning method, scope and quality.

You will report to the CTO as the first in this role, building testing processes and delivering actionable findings with remediation guidance. On-site only at Sunway Tower, Kuala Lumpur.